file[.]exe | Triage™

General

Target
file.exe
Size 399KB
Sample221008-v1emxafba2
SHA256 614fc876a9dff9ec9c157384c791ffda532024dd00f807288cd20091b9a89753
MD5 d7b2a7a27be76705bfe35f9eb37160b4
SHA1 3d9ee73ba32f44d1ea29376e1623a13c36bae880
SHA512 6bdf6f26c7f8af1f24375d293becf369330d239c56cbec55d1aeb9edd7a32cad03491c672c75a05379c97d7b5c779ad002ce21e3843daa68de1244fa78557786
SSDEEP 6144:jVGB+GCIGsiLiYyzjVBomjniR8iAvM3UjnMdXaZsrwVfXS:j8mXsiLeBom2Kg3JNZ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 399KB

file.exe

IMPHASH 9b42896b222b9e79ad310b3f1bed70e0
SHA256 614fc876a9dff9ec9c157384c791ffda532024dd00f807288cd20091b9a89753
MD5 d7b2a7a27be76705bfe35f9eb37160b4
SHA1 3d9ee73ba32f44d1ea29376e1623a13c36bae880
SHA512 6bdf6f26c7f8af1f24375d293becf369330d239c56cbec55d1aeb9edd7a32cad03491c672c75a05379c97d7b5c779ad002ce21e3843daa68de1244fa78557786
SSDEEP 6144:jVGB+GCIGsiLiYyzjVBomjniR8iAvM3UjnMdXaZsrwVfXS:j8mXsiLeBom2Kg3JNZ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

29408

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

HeapFree SetVolumeMountPointW GetSystemDefaultLCID EnumCalendarInfoExW GetPrivateProfileStringW EnumResourceTypesA GetVolumePathNameW SetFileShortNameW LoadLibraryW ReadConsoleInputA CreateEventA GetConsoleAliasExesLengthW GetSystemTimeAdjustment GetVersionExW GetFileAttributesA GetConsoleAliasW WriteConsoleW GetBinaryTypeA GetGeoInfoA GetTimeZoneInformation WritePrivateProfileStringW GetLastError GetProcAddress GetLongPathNameA VirtualAlloc PeekConsoleInputW CreateTimerQueueTimer WaitNamedPipeA GlobalGetAtomNameA SearchPathA LoadLibraryA WriteConsoleA InterlockedExchangeAdd OpenWaitableTimerW LocalAlloc SetCalendarInfoW AddVectoredExceptionHandler AddAtomW FoldStringW GlobalWire FindNextFileA GetModuleHandleA CreateMutexA FindNextFileW VirtualProtect GetFileAttributesExW GetShortPathNameW GetCPInfoExA SetFileShortNameA EnumResourceLanguagesW GetFileInformationByHandle SetFileAttributesW DeleteFileA FindResourceExW SetConsoleTextAttribute IsBadHugeReadPtr SetComputerNameA FindFirstChangeNotificationW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetStartupInfoA RaiseException RtlUnwind HeapAlloc EnterCriticalSection LeaveCriticalSection GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement SetHandleCount GetStdHandle GetFileType DeleteCriticalSection Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc CloseHandle CreateFileA InitializeCriticalSectionAndSpinCount ReadFile HeapSize SetStdHandle GetConsoleOutputCP MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers SetEndOfFile GetProcessHeap

gdi32

GetCharWidthFloatA

advapi32

DeregisterEventSource CloseEventLog

Sharing